Turn off or reset two-factor authentication

Overview

You can turn off your own authenticator app or remove your own passkeys at any time from Security settings. If you’re an owner or admin and a teammate is locked out, you can reset their two-factor authentication for them from the Agents list.

Turn off your authenticator app

Go to Settings → Profile → Security.
Under Authenticator app, click Turn off.
Enter a current 6-digit code from your authenticator app, or a recovery code.
Click Turn off to confirm.

If you also have a passkey set up, two-factor authentication stays on afterward — your passkey becomes the only second factor. If you have no passkey, this fully turns two-factor authentication off and clears your recovery codes.

Remove a passkey

Go to Settings → Profile → Security.
Under Passkeys, click Remove next to the passkey you want to delete.
Enter a current authenticator code or a recovery code to confirm.
Click Remove.

Removing your last passkey while you have no authenticator app fully turns off two-factor authentication and clears your recovery codes.

Owners and admins: reset a teammate’s two-factor authentication

Click the gear icon in the top-right corner and choose Agents.
Find the agent’s row and click Reset 2FA.
If you have two-factor authentication enabled yourself, a Your current code field appears — enter a current code from your own authenticator app or one of your own recovery codes.
Click Confirm reset 2FA.
Their authenticator app, passkeys, and recovery codes are all cleared. They’ll need to set up two-factor authentication again the next time they sign in — sooner if your workspace requires it.

Good to know

You can’t reset the owner’s two-factor authentication this way — an owner can only turn off their own, from their own Security settings.
If your workspace requires all agents to have two-factor authentication on, an agent whose 2FA was just reset is prompted to set up a new method the next time they sign in.